Application Security News and Articles


CISA Releases Guidance on SIEM and SOAR Implementation

The guidance outlines the benefits and challenges or SIEM and SOAR platforms, and shares implementation recommendations. The post CISA Releases Guidance on SIEM and SOAR Implementation appeared first on SecurityWeek.

From Swipe to Scare: Data Privacy and Cyber Security Concerns in Dating Apps

Dating apps changed everything; didn’t they? They’ve truly revolutionised how we discover love and make connections. Consider this: over 323 million people worldwide use them—millions swiping, matching, and meeting. But there’s a catch ...

Why privacy in blockchain must start with open source

Traditionally, trust came from centralized institutions. Banks, payment networks, and clearinghouses are closed systems. Users cannot see the inner workings, but they rely on external audits, government regulation, and long histories of ...

Using AI to outsmart AI-driven phishing scams

Phishing scams used to be filled with awkward wording and obvious grammar mistakes. Not anymore. AI is now making it harder to distinguish what is real. According to Cofense, email-based scams surged 70% year over year, driven by AI’s ability ...

AI agents have access to key data across the enterprise

82% of organizations already use AI agents, but only 44% of organizations report having policies in place to secure them, according to SailPoint. While 53% are in the process of developing such policies, the reality is that most remain exposed ...

Exchange 2016, 2019 support ends soon: What IT should do to stay secure

Microsoft is ending support for Exchange Server 2016, Exchange Server 2019, and Outlook 2016 on October 14, 2025. That date might seem far off, but if you’re managing email systems or Office deployments, it’s worth paying attention to now. ...

Infosec products of the month: May 2025

Here’s a look at the most interesting products from the past month, featuring releases from: Anchore, BalkanID, Cyble, groundcover, Hunted Labs, LogicGate, McAfee, Obsidian Security, Outpost24, PentestPad, ProcessUnity, Resecurity, Searchlight ...

Evaluating the Security Efficacy of Web Application Firewalls (WAFs)

Web Application Firewalls (WAFs) are now a staple in defending web-facing applications and APIs, acting as specialized filters to block malicious traffic before it ever reaches your systems. But simply deploying a WAF isn’t enough, the real ...

Feel Supported by Your NHI Security Team

Have You Considered the Strategic Importance of NHI Management? Consider this: The evolving technology has caused a seismic shift in how businesses protect their IT infrastructure. A crucial part of this protection is the effective management of ...

Unlocking Powerful Benefits with NHIs

Is Your Organization Realizing the Powerful Benefits of NHIs? Acquiring a deep understanding of Non-Human Identities (NHIs) is pivotal for organizations striving to build solid fortifications around their data and systems. NHIs, also known as ...

Building Trust Through Effective NHI Management

Why is Trust Crucial in NHI Management? Think about it. How much faith do we place in Non-Human Identities (NHIs) that aid in modern cybersecurity protocols? Is that trust well-founded? The role of trust in NHI management becomes key as we rely ...

Victoria’s Secret Hit By ‘Security Incident’ After Attacks on UK Retailers

Victoria's Secret took down its U.S. website this week after an unspecified security incident that cybersecurity experts believe is related to similar attacks on UK retailers earlier this month by the high-profile threat group Scattered Spider, ...

The OWASP Top 10 Vulnerabilities

Stay updated on the latest in application security with the OWASP Top 10 vulnerabilities. The post The OWASP Top 10 Vulnerabilities appeared first on Security Boulevard.

What Is MCP? The New Protocol Reshaping AI Agent Security

As AI agents take on more autonomous roles across the web, the Model Context Protocol (MCP) emerges as a promising, but risky, foundation for enabling secure, structured, and intent-aware interactions at scale. The post What Is MCP? The New ...

CISA’s New SOAR Guidance Shows Where Automation Must Go Next

CISA and ASD’s new SIEM & SOAR guidance reveals challenges with playbook maintenance and paves the way for autonomous SOC automation. The post CISA’s New SOAR Guidance Shows Where Automation Must Go Next appeared first on D3 ...

CISO’s open letter on third-party software risk is a call to action

The accelerated adoption of software as a service (SaaS) has fundamentally changed software consumption patterns, but it has also introduced a significant concentration of risk across enterprise environments and global critical ...

Emulating the Unyielding Scattered Spider

AttackIQ has released a new assessment template that contains a curated list of Tools and Malware samples associated with Scattered Spider to help defenders improve their security posture against this sophisticated and persistent threat. The ...

BSidesLV24 – PasswordsCon – We Removed Passwords, Now What?

Author/Presenter: Aldo Salas Our sincere appreciation to BSidesLV, and the Presenters/Authors for publishing their erudite Security BSidesLV24 content. Originating from the conference’s events located at the Tuscany Suites & Casino; and ...

LogonBox SSPR 2.4.12 – Now Available

IntroductionLogonBox is pleased to announce the immediate availability of LogonBox SSPR 2.4.12.This release includes performance improvements for large user counts, disabled account license changes, and retries for cloud-delivered OTP messages. ...

Survey Surfaces Scope of Identity and Access Management Challenges

A survey of 625 IT and IT security professionals in the U.S. published today finds only half (50%) consider the investments made in identity and access management (IAM) tools to be effective. Conducted by the Ponemon Institute on behalf of ...